Show filters
20 Total Results
Displaying 11-20 of 20
Sort by:
Attacker Value
Unknown
CVE-2023-32294
Disclosure Date: August 30, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin <= 1.1.6 versions.
0
Attacker Value
Unknown
CVE-2023-3388
Disclosure Date: June 24, 2023 (last updated February 25, 2025)
The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A partial patch was made available in 2.10.1 and the issue was fully patched in 2.10.2.
0
Attacker Value
Unknown
CVE-2022-45815
Disclosure Date: May 25, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes GDPR Compliance & Cookie Consent plugin <= 1.2 versions.
0
Attacker Value
Unknown
CVE-2023-23894
Disclosure Date: May 08, 2023 (last updated February 24, 2025)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin <= 17.5.3 versions.
0
Attacker Value
Unknown
CVE-2022-3823
Disclosure Date: November 28, 2022 (last updated October 08, 2023)
The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
0
Attacker Value
Unknown
CVE-2021-24590
Disclosure Date: September 06, 2021 (last updated February 23, 2025)
The Cookie Notice & Consent Banner for GDPR & CCPA Compliance WordPress plugin before 1.7.2 does not properly sanitize inputs to prevent injection of arbitrary HTML within the plugin's design customization options.
0
Attacker Value
Unknown
CVE-2020-20633
Disclosure Date: August 21, 2020 (last updated February 22, 2025)
ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent (cookie-law-info) 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation.
0
Attacker Value
Unknown
CVE-2018-10371
Disclosure Date: May 01, 2018 (last updated November 26, 2024)
An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripting vulnerability has been identified in the web interface of the plugin that allows the execution of arbitrary HTML/script code to be executed in a victim's web browser via a page title.
0
Attacker Value
Unknown
CVE-2018-10310
Disclosure Date: April 25, 2018 (last updated November 26, 2024)
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser.
0
Attacker Value
Unknown
CVE-2018-10309
Disclosure Date: April 24, 2018 (last updated November 26, 2024)
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.
0
